New CVE-2021-45105 for log4j
On december 19th a new vulnerability was found in log4j 2.16.0 Are there any plans to upgrade to log4j 2.17.0 as suggested by Apache? As long as this upgrrade is not implemented, I am not allowed to use SOAP UI which makes my test work much more difficult
Hi doom71, there's a fresh update on that on the SmartBear site, please refer to this page: https://smartbear.com/security/cve-2021-44228/
doom71 we've released SoapUI 5.7.0 which uses Log4j 2.17.1
